Your privacy is important to us. It is What is in the box's policy to respect your privacy regarding any information we may collect from you across our website.

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent.

We only retain collected information for as long as necessary to provide you with your requested service.

What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification.

We retain your personal information and content only for as long as your account remains in use. Free accounts that have been inactive for 180 consecutive days are automatically scheduled for deletion. We send reminder emails approximately 30 days and 10 days before the deletion date, and provide a 30-day grace period after the account is scheduled — signing in at any point during this period restores the account in full.

Once the grace period ends, all personal data associated with the account — including profile information, boxes, items, uploaded photos, location data, and activity logs — is permanently deleted from our systems and our object storage provider, and cannot be recovered. Accounts with active or prior paid subscriptions are exempt from this automatic deletion policy.

You may also request deletion of your account at any time from your account settings, which immediately removes your data subject to the same retention rules described above.

Photo attachments are a paid-plan feature. If you move from a paid plan to the free Personal plan (for example, when a free trial ends or a subscription is cancelled), any photos you have already uploaded will remain visible on your boxes and items for an additional 30 days as a courtesy. We will email you when this period begins.

After the 30-day grace, those photos and the underlying files in our object storage are permanently deleted. Subscribing to a plan that supports photos at any point during the grace period cancels the deletion and restores full photo management.